CVE-2024-53648

Summary

CVE-2024-53648 is a vulnerability affecting multiple Siemens SIPROTEC 5 models, including 6MD84, 6MD85, 6MD86, 7KE85, 7SA82, 7SA86, 7SA87, 7SD82, 7SD85, 7SL82, 7SL86, 7SL87, 7SJ81, 7SJ82, 7SJ85, 7SJ86, 7SK82, 7SK85, 7SL82, 7SL86, 7SL87, 7SS85, 7ST85, 7ST86, 7SX82, 7SX85, 7SY82, 7UM85, 7UT82, 7UT85, 7UT86, 7UT87, 7VE85, 7VK87, and 7VU85, as well as the SIPROTEC 5 Compact 7SX800 (CP050). These devices do not adequately restrict access to a development shell that can be reached through a physical interface. An unauthenticated attacker with physical access to the device can exploit this vulnerability to execute arbitrary commands, potentially leading to significant security risks. All versions prior to V9.90 are impacted.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.